curl --request GET \
--url https://control.ergoly.ai/api/v1/activity \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://control.ergoly.ai/api/v1/activity', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://control.ergoly.ai/api/v1/activity"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"data": [
{
"id": "b0a91827-3645-4c5d-8e7f-90a1b2c3d4e5",
"kind": "api.worker.created",
"domain": "api",
"actorClerkUserId": null,
"payload": {
"worker_id": "8f1c2d3e-9a4b-4c5d-8e6f-1a2b3c4d5e6f",
"slug": "rowan",
"actor_kind": "api_key",
"actor_api_key_id": "ak_2b9f1c"
},
"createdAt": "2026-02-11T14:03:22.000Z"
}
],
"page": {
"limit": 50,
"hasMore": true,
"nextCursor": "MjAyNi0wMy0wNFQwOToxNDowMi4wMDBafDhmMWMyZDNlLTlhNGItNGM1ZC04ZTZmLTFhMmIzYzRkNWU2Zg"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}Get the activity feed
?kind= is exact. ?domain= matches the leading segment of kind, so ?domain=api is every write made through this API. ?actor= takes a user id, or the literal system for rows with no person behind them — which is where your keys’ own writes appear.
curl --request GET \
--url https://control.ergoly.ai/api/v1/activity \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://control.ergoly.ai/api/v1/activity', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://control.ergoly.ai/api/v1/activity"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"data": [
{
"id": "b0a91827-3645-4c5d-8e7f-90a1b2c3d4e5",
"kind": "api.worker.created",
"domain": "api",
"actorClerkUserId": null,
"payload": {
"worker_id": "8f1c2d3e-9a4b-4c5d-8e6f-1a2b3c4d5e6f",
"slug": "rowan",
"actor_kind": "api_key",
"actor_api_key_id": "ak_2b9f1c"
},
"createdAt": "2026-02-11T14:03:22.000Z"
}
],
"page": {
"limit": 50,
"hasMore": true,
"nextCursor": "MjAyNi0wMy0wNFQwOToxNDowMi4wMDBafDhmMWMyZDNlLTlhNGItNGM1ZC04ZTZmLTFhMmIzYzRkNWU2Zg"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}{
"error": {
"code": "unauthorized",
"message": "<string>",
"docs": "<string>"
}
}Authorizations
An organization-scoped API key, minted in control under Settings → API keys. Every failure to authenticate answers one identical 401: "Provide a valid organization-scoped API key or an active session." Each operation names the one scope it is filed under, <resource>:<read|write>, where the resource is the first path segment after /api/v1/; a key minted today carries all 22 of them. Scopes are RECORDED — on the key and on every audit row — and are not yet enforced: no request is refused for want of one.
Query Parameters
Exact match on the dotted event name.
Matches the leading segment of kind — api, worker, foreman, sandbox.
A user id, or the literal system for actor-less rows.
Page size. Defaults to 50, clamped at 200. A value that is not a positive integer is a 400.
Opaque keyset cursor from the previous page's page.nextCursor. A cursor this API did not issue is a 400, never a silent page one.

